Tessera
Folgen

💥 leonjza

@leonjza.bsky.social

[ 'cto @sensepost.com', '@orangecyberdef', 'caffeine fueled', '(╯°□°)╯︵ ┻━┻', 'security guy', 'metalhead', 'i saw your password', 'KOOBo+KXleKAv+KXlSnjgaM=' ]

95 Posts457 Follower147 Folgt
Katie Mack@astrokatie.com · 4mo ago

The #Artemis II astronauts said they needed more superlatives to describe their view of the eclipse, when the Sun was behind the Moon and its near surface was faintly illuminated by Earthshine

Captured by the Artemis II crew during their lunar flyby on April 6, 2026, this image shows the Moon fully eclipsing the Sun. From the crew’s perspective, the Moon appears large enough to completely block the Sun, creating nearly 54 minutes of totality and extending the view far beyond what is possible from Earth. The corona forms a glowing halo around the dark lunar disk, revealing details of the Sun’s outer atmosphere typically hidden by its brightness. Also visible are stars, typically too faint to see when imaging the Moon, but with the Moon in darkness stars are readily imaged. This unique vantage point provides both a striking visual and a valuable opportunity for astronauts to document and describe the corona during humanity’s return to deep space. The faint glow of the nearside of the Moon is visible in this image, having been illuminated by light reflected off the Earth. [alt text from NASA]
💥 leonjza@leonjza.bsky.social · 6mo ago

Had a case this week of a fairly secure deployment of BeyondTrust, but vulnerable to CVE-2026-1731. With basically zero egress, I implemented a timing oracle POC instead. Takes about 20 minutes to get the ls command output in this demo, but hey, it works! :D

💥 leonjza@leonjza.bsky.social · 6mo ago

Noone asked for this, but I'm trying to get more comfortable with qemu as a whole which has resulted in this overly fancy Qemu Machine Protocol (QMP) socket client, complete with dynamic schema parsing, event subscriptions and tab completion, because why not :P

💥 leonjza@leonjza.bsky.social · 7mo ago

Really excited to present this Frida training @1ns0mn1h4ck.bsky.social with @ipmegladon.bsky.social and myself! If you've dabbled with Frida before, but want a practical learning opportunity to improve your usage and understanding, this one is for you!

Insomni'hack @1ns0mn1h4ck.bsky.social · 7mo ago

Learn how to bypass security controls using Frida at #InsomniHack workshop. "Binary Instrumentation with Frida" is led by SensePost and it is made for reverse engineers, pentesters & security researchers. Get your ticket: https://ow.ly/lTxz50XVBJm #Cybersecurity #Infosec #INSO2026 #Cyberworkshops

💥 leonjza@leonjza.bsky.social · 8mo ago

It’s almost time for my @BSidesCapeTown talk, and I’ve just open sourced pipetap. My Windows named pipe proxy & multi-tool. Excited to see what you do with it! github.com/sensepost/pi...

GitHub - sensepost/pipetap: A Windows Named Pipe Multi-tool / Proxy

A Windows Named Pipe Multi-tool / Proxy. Contribute to sensepost/pipetap development by creating an account on GitHub.

github.com

💥 leonjza@leonjza.bsky.social · 11mo ago

I've been hacking on a new Windows Named Pipe tool called PipeTap which helps analyse named pipe communications. Born out of necessity while doing some vulnerability research on a target, its been super useful in reversing it's fairly complex protocol. :)

The proxy view for PipeTap, a Windows Named Pipe Analysis Tool
@pard0p.bsky.social · 8mo ago

LibPicoManager is a unified PICO management framework that provides centralized control over PICOs in memory, enabling dynamic code loading, runtime PICO substitution, and advanced evasion techniques like sleep masking through a single RWX code block. github.com/pard0p/LibPi...

GitHub - pard0p/LibPicoManager: LibPicoManager is a unified PICO management framework that provides centralized control over Position Independent Code Objects in shared memory, enabling dynamic code l...

LibPicoManager is a unified PICO management framework that provides centralized control over Position Independent Code Objects in shared memory, enabling dynamic code loading, runtime PICO substitu...

github.com

Carlos Holguera@grepharder.bsky.social · 9mo ago

We've been waiting 5 years for this: objection has been updated to 1.12.x with Frida17+ support. Thank you so much @leonjza.bsky.social and everyone who contributed! github.com/sensepost/ob... Thanks to @ipmegladon.bsky.social for updating the MASTG accordingly (OWASP/mastg/pull/3378)

Release 1.12.0 · sensepost/objection

The, wow, finally, a release release! 😂 Honestly, there has been so much that has changed, and it's hard to thank and attribute to everyone that has contributed. To that end, thank you for your con...

github.com

Dominic White@singe.bsky.social · 9mo ago

Made this last night, it’s useful for finding a large number of domains hosting phishing kits or malware based on a consistent pattern github.com/singe/domain-p… Might be useful for some of you.

GitHub - singe/domain-probe: A utility to find identically configured domains and web-servers based on a pattern. Used to find phishing kits.

A utility to find identically configured domains and web-servers based on a pattern. Used to find phishing kits. - singe/domain-probe

github.com